🚨 CISA KEV 3[−]
3 Oct KEVHackers Now Exploit Ivanti Endpoint Manager Vulnerability to Launch Cyber AttacksThe Cybersecurity and Infrastructure Security Agency (CISA) has announced the addition of a new vulnerability to its Known Exploited Vulnerabilities Catalog. This vulnerability, CVE-2024-29824, affects Ivanti Endpoint Manager (EPM) and has become a target for cybercriminals using…GBHACKERS.COM
3 Oct KEVCritical Ivanti flaw finds in-the-wild RCE despite available patchesThe US Cybersecurity and Infrastructure Security Agency (CISA) has warned Ivanti customers of active exploitation of a critical Endpoint Manager (EPM) vulnerability allowing remote code execution (RCE) that the company fixed in May 2024. Tracked as CVE-2024-29824 , the flaw is an…CSOONLINE.COM
3 Oct KEVCISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. CVE-2024-45519 Synacor Zimbra Collaboration Command Execution Vulnerability These types of vulnerabilities are frequent attack vectors for malicio…CISA.GOV
🐛 COMMON VULNERABILITIES AND EXPOSURES 5[−]
3 Oct KEVIvanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to PatchThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Endpoint Manager (EPM) that the company patched in May to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability, …THEHACKERNEWS.COM
3 OctCisco Nexus Vulnerability Let Hackers Execute Arbitrary Commands on Vulnerable SystemsA critical vulnerability has been discovered in Cisco’s Nexus Dashboard Fabric Controller (NDFC), potentially allowing hackers to execute arbitrary commands on affected systems. This flaw, identified as CVE-2024-20432, was first published on October 2, 2024. Its CVSS score …GBHACKERS.COM
3 OctChromium: CVE-2024-7025 Integer overflow in LayoutThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.MSRC.MICROSOFT.COM
3 OctChromium: CVE-2024-9369 Insufficient data validation in MojoThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.MSRC.MICROSOFT.COM
3 OctChromium: CVE-2024-9370 Inappropriate implementation in V8This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.MSRC.MICROSOFT.COM
⚠️ VULNERABILITY DISCLOSURE 23[−]
3 OctAI could provide the cyber-risk crystal ball every CISO needsAs much as cybersecurity professionals might prefer otherwise, ours is a field defined by reaction — just ask the average cyber analyst or threat hunter about their day to get a sense of how true this is. We are a technology-centric field in a functional sense, but technology evo…CSOONLINE.COM
3 OctLockBit Ransomware and Evil Corp Leaders Arrested and Sanctioned in Joint Global EffortA new wave of international law enforcement actions has led to four arrests and the takedown of nine servers linked to the LockBit (aka Bitwise Spider) ransomware operation, marking the latest salvo against what was once a prolific financially motivated group. This includes the a…THEHACKERNEWS.COM
3 OctWeird Zimbra VulnerabilityHackers can execute commands on a remote computer by sending malformed emails to a Zimbra mail server. It’s critical, but difficult to exploit. In an email sent Wednesday afternoon, Proofpoint researcher Greg Lesnewich seemed to largely concur that the attacks weren’t…SCHNEIER.COM
3 OctMeta partners with banks in the UK to combat online scamsMeta is working with banks in the UK to curb the menace of online frauds that originate or are executed on social media platforms such as Facebook or Instagram. The Facebook parent company has announced the expansion of its Fraud Intelligence Reciprocal Exchange (FIRE) program, a…CSOONLINE.COM
3 OctWhen CUPS Runneth Over: The Threat of DDoSsubmitted by kid to cybersecurity 3 points | 0 comments https://www.akamai.com/blog/security-research/october-cups-ddos-threat Akamai researchers have confirmed a new attack vector using CUPS that could be leveraged to stage distributed denial-of-service (DDoS) attacks. Research …SH.ITJUST.WORKS
3 OctTelegram revealed it shared U.S. user data with law enforcementsubmitted by kid to cybersecurity 3 points | 0 comments https://securityaffairs.com/169288/digital-id/telegramshared-u-s-user-data-with-law-enforcement.htmlSH.ITJUST.WORKS
3 OctCisco Nexus Vulnerability Let Hackers Execute Arbitrary Commands on Vulnerable Systemssubmitted by kid to cybersecurity 2 points | 0 comments https://gbhackers.com/cisco-nexus-vulnerability/SH.ITJUST.WORKS
3 OctA Single Cloud Compromise Can Feed an Army of AI Sex BotsOrganizations that get relieved of credentials to their cloud environments can quickly find themselves part of a disturbing new trend: Cybercriminals using stolen cloud credentials to operate and resell sexualized AI-powered chat services. Researchers say these illicit chat bots,…KREBSONSECURITY.COM
3 OctTick tock.. Operation Cronos arrests more LockBit ransomware gang suspectsInternational law enforcement continues to dismantle the LockBit ransomware gang's infrastructure. Read more in my article on the Tripwire State of Security blog.TRIPWIRE.COM
3 OctCISA issues warning about another Ivanti flaw under active attackThe U.S. IT software giant confirmed this week that the vulnerability, fixed in May, is now being used to target a "limited number" of Ivanti customers. © 2024 TechCrunch. All rights reserved. For personal use only.TECHCRUNCH.COM
3 OctCISA Releases Three Industrial Control Systems AdvisoriesCISA released three Industrial Control Systems (ICS) advisories on October 3, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-277-01 TEM Opera Plus FM Family Transmitter ICSA-24-277-02 Subnet …CISA.GOV
3 OctFix for BGP routing insecurity ‘plagued by software vulnerabilities’ of its own, researchers findResource Public Key Infrastructure (RPKI) is not yet the simple fix for the security weaknesses of the internet’s Border Gateway Protocol (BGP) many in the communications industry think it is, a team of German researchers has warned. In a newly published paper, RPKI: Not Perfect …NETWORKWORLD.COM
3 OctDDoS attacks are increasingly targeting critical infrastructureCritical infrastructure sectors including banking, financial services, government, and public utilities such as energy providers, experienced a 55% increase in distributed denial-of-service (DDoS) attacks over the past four years, according to a new report. Released just days aft…CSOONLINE.COM
3 OctAnalyzing Malware at Scale - John Hammond - PSW #845Segment description coming soon! Segment Resources: - https://www.huntress.com/blog/the-hackers-in-the-arena-the-huntress-ctf-retrospective - https://www.huntress.com/blog/fake-browser-updates-lead-to-boinc-volunteer-computing-software Visit https://www.securityweekly.com/psw for…YOUTUBE.COM
3 Oct KEVPixel's Proactive Approach to Security: Addressing Vulnerabilities in Cellular ModemsPosted by Sherk Chung, Stephan Chen, Pixel team, and Roger Piqueras Jover, Ivan Lozano, Android team Pixel phones have earned a well-deserved reputation for being security-conscious. In this blog, we'll take a peek under the hood to see how Pixel mitigates common exploits on cell…SECURITY.GOOGLEBLOG.COM
3 OctEvaluating Mitigations & Vulnerabilities in ChromePosted by Alex Gough, Chrome Security Team The Chrome Security Team is constantly striving to make it safer to browse the web. We invest in mechanisms to make classes of security bugs impossible, mitigations that make it more difficult to exploit a security bug, and sandboxing to…SECURITY.GOOGLEBLOG.COM
3 OctOver 4,000 Adobe Commerce, Magento shops hacked in CosmicSting attacksApproximately 5% of all Adobe Commerce and Magento online stores, or 4,275 in absolute numbers, have been hacked in "CosmicSting" attacks. [...]BLEEPINGCOMPUTER.COM
3 OctAndroid 14 Adds New Security Features to Block 2G Exploits and Baseband AttacksGoogle has revealed the various security guardrails that have been incorporated into its latest Pixel devices to counter the rising threat posed by baseband security attacks. The cellular baseband (i.e., modem) refers to a processor on the device that's responsible for handling a…THEHACKERNEWS.COM
3 OctBreach Roundup: AI 'Nudify' Sites Serve MalwareAlso: Prison Sentences for BEC Scammers and a West African Cybercrime Crackdown This week, AI nudify sites spread malware, BEC scammers head to prison, London man charged with hacking, and a Spanish insurance company with a breach. Also, a North Korean hacking group and a West Af…DATABREACHTODAY.CO.UK
3 OctRecently patched CUPS flaw can be used to amplify DDoS attacksA recently disclosed vulnerability in the Common Unix Printing System (CUPS) open-source printing system can be exploited by threat actors to launch distributed denial-of-service (DDoS) attacks with a 600x amplification factor. [...]BLEEPINGCOMPUTER.COM
📋 SECURITY BULLETINS 1[−]
3 OctTor Browser 13.5.6 Released – What’s New!The Tor Project has announced the release of Tor Browser 13.5.6, which is now available for download from its official website and distribution directory. This latest version includes significant updates that focus on enhancing security and user experience across all platforms. K…GBHACKERS.COM
📢 SECURITY ADVISORIES 6[−]
3 OctMake OT networks a priority, say nine national security agenciesTo most people in IT, what happens inside operational technology (OT) networks is a bit of a mystery. They’re hidden networks that keep everything from critical infrastructure to manufacturing humming along. As long as they work, they get very little attention. What happened at a…CSOONLINE.COM
3 OctDoppler Launches ‘Change Requests’ to Strengthen Secrets Management Security with Audited ApprovalsDoppler, the leading platform in secrets management, today announces the launch of Change Requests, a new feature providing engineering teams with a secure, auditable approval process for managing and controlling secret changes across environments. Designed to enhance security, c…GBHACKERS.COM
3 OctGlobal Cybersecurity Agencies Release OT Security GuidelinesPrinciples to Ensure Critical Infrastructure's Operational Technology Security Don't pull data from an operational technology network: OT networks should push data out. Segment critical OT networks. Don't introduce cybersecurity systems into an OT network unless administrators ca…DATABREACHTODAY.CO.UK
3 OctENISA 2024: Ransomware and AI Are Posing New CyberthreatsENISA's Ifigeneia Lella Shares Highlights of 2024 Threat Landscape Report While the number of ransomware attacks stayed about the same in the past year, cybercriminals are using more effective tactics such as weaponizing breach disclosure deadlines to extract higher ransoms, acco…DATABREACHTODAY.CO.UK
3 OctCISA Preparing to Assess Federal Zero Trust ProgressUS Cyber Defense Agency Plans to Review Updated Implementation Plans in November A top official from the U.S. Cybersecurity and Infrastructure Security Agency said Thursday the agency is planning to review updated federal implementation plans and ensure agencies are aligning with…DATABREACHTODAY.CO.UK
🔥 INCIDENT REPORTING 7[−]
3 OctNorthern Ireland Police to Pay £750,000 Fine Following Data BreachThe Police Service of Northern Ireland (PSNI) has been ordered to pay a £750,000 fine following a significant data breach last year. The breach involved the accidental release of the personal details of 9,400 officers and staff. Despite representations to the Information Commissi…GBHACKERS.COM
3 OctNorth Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber AttacksThreat actors with ties to North Korea have been observed delivering a previously undocumented backdoor and remote access trojan (RAT) called VeilShell as part of a campaign targeting Cambodia and likely other Southeast Asian countries. The activity, dubbed SHROUDED#SLEEP by Secu…THEHACKERNEWS.COM
3 OctNew VPN Credential Attack Goes to Great Lengths to Obtain AccessA new “so-phish-ticated” attack uses phone calls, social engineering, lookalike domains, and impersonated company VPN sites to gain initial access to a victim network.KNOWBE4.COM
3 OctNorth Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attackssubmitted by kid to cybersecurity 1 points | 0 comments https://thehackernews.com/2024/10/north-korean-hackers-using-new.htmlSH.ITJUST.WORKS
3 OctDutch Police: ‘State actor’ likely behind recent data breachThe national Dutch police (Politie) says that a state actor was likely behind the data breach it detected last week. [...]BLEEPINGCOMPUTER.COM
3 OctChina-Backed APT Group Culling Thai Government Datasubmitted by kid to cybersecurity 1 points | 0 comments https://www.darkreading.com/cyberattacks-data-breaches/new-china-backed-apt-group-culling-thai-government-dataSH.ITJUST.WORKS
3 Oct600,000 Prison Inmates to Share in $6.49M Breach SettlementCorrectCare to Settle Lawsuit After 'Inadvertently' Exposing PHI on Web for Months A misconfigured web server and the exposure of sensitive information for nearly 600,000 prison inmates in 2022 will cost medical claims processing company CorrectCare $6.49 million to settle a cons…DATABREACHTODAY.CO.UK
🕵️ THREAT INTELLIGENCE 22[−]
3 OctMeta smart glasses can be used to dox anyone in seconds, study findssubmitted by return2ozma to cybersecurity 2 points | 0 comments https://arstechnica.com/tech-policy/2024/10/harvard-students-make-auto-doxxing-smart-glasses-to-show-need-for-privacy-regs/SH.ITJUST.WORKS
3 OctKickstart Your DShield Honeypot [Guest Diary], (Thu, Oct 3rd)[This is a Guest Diary by Joshua Gilman, an ISC intern as part of the SANS.edu BACS program]
ISC.SANS.EDU
3 OctISC Stormcast For Thursday, October 3rd, 2024 https://isc.sans.edu/podcastdetail/9164, (Thu, Oct 3rd)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
3 OctANY.RUN Upgrades Threat Intelligence to Identify Emerging ThreatsANY.RUN announced an upgrade to its Threat Intelligence Portal, enhancing its capabilities to identify and analyze emerging cyber threats. This upgrade underscores ANY.RUN’s commitment to providing comprehensive threat intelligence solutions, empowering users to navigate th…GBHACKERS.COM
3 OctFIN7 Gang Hides Malware in AI “Deepnude” Sitessubmitted by kid to cybersecurity 1 points | 0 comments https://www.infosecurity-magazine.com/news/fin7-hides-malware-ai-deepnude/SH.ITJUST.WORKS
3 OctNorth Korea Profits as 'Stonefly' APT Swarms US Co's.submitted by kid to cybersecurity 2 points | 0 comments https://www.darkreading.com/vulnerabilities-threats/stonefly-apt-us-private-cos-north-korean-profitSH.ITJUST.WORKS
3 OctTrends: Hardware gets AI updates in 2024The surge in artificial intelligence (AI) usage over the past two and a half years has dramatically changed not only software but hardware as well. As AI usage continues to evolve, PC makers have found in AI an opportunity to improve end-user devices by offering AI-specific hardw…SECURITYINTELLIGENCE.COM
3 OctMillions of Enterprises at Risk: SquareX Shows How Malicious Extensions Bypass Google’s MV3 RestrictionsAt DEF CON 32, the SquareX research team delivered a hard-hitting presentation titled Sneaky Extensions: The MV3 Escape Artists where they shared their findings on how malicious browser extensions are bypassing Google’s latest standard for building chrome extensions: Manifest V3 …GBHACKERS.COM
3 OctWebinar Announcement: Attack Surface Management to the Rescue – Find, Fix, Fortify Your ASM with Criminal IPAn exclusive live webinar will take place on October 4th at noon Eastern Time (ET), demonstrating how Criminal IP’s Attack Surface Management (ASM) can help organizations proactively detect and mitigate cyber threats. The webinar will feature a Criminal IP ASM Live Demo, providin…GBHACKERS.COM
3 OctQuantum Breakthroughs Drive New Encryption StrategiesKawin Boonyapredee on Why Organizations Should Take Post-Quantum Threats Seriously Quantum computing has been evolving for decades and holds immense promise. Companies have invested billions of dollars in this technology, which will eventually solve complex business problems. But…DATABREACHTODAY.CO.UK
3 OctCybercriminal Gang Targeting SMBs Using Business Email CompromiseResearchers at Todyl have published a report on a major cybercriminal group that’s conducting business email compromise (BEC) attacks against small and medium-sized businesses. Todyl describes three separate BEC attacks launched by this threat actor.KNOWBE4.COM
3 OctDon’t Put Real Answers Into Your Password Reset QuestionsThis recent article on how a hacker used genealogy websites to help better guess victims' password reset answers made it a great time to share a suggestion: Don’t answer password reset questions with real answers!KNOWBE4.COM
3 OctNews alert: Upcoming webinar highlights threat mitigation, fortifying ‘ASM’ with Criminal IPTorrance, Calif., Oct. 3, 2024, CyberNewswire — An exclusive live webinar will take place on October 4th at noon Eastern Time (ET), demonstrating how Criminal IP’s Attack Surface Management (ASM) can help organizations proactively detect and mitigate cyber threats. The R…LASTWATCHDOG.COM
3 OctLinux malware “perfctl” behind years-long cryptomining campaignsubmitted by kid to cybersecurity 1 points | 0 comments https://www.bleepingcomputer.com/news/security/linux-malware-perfctl-behind-years-long-cryptomining-campaign/SH.ITJUST.WORKS
3 OctCryptohack Roundup: Guilty Plea in $37M Theft CaseAlso: $3.8 Million Onyx Hack, Conviction in a Crypto ATM Case This week, a guilty plea for $37M stolen, a $3.8M Onyx hack, a first conviction for illegal crypto ATM operations, Zort owner fraud, WazirX's post-hack liability, U.S. congressmen ask for Binance exec's release, a U.S.…DATABREACHTODAY.CO.UK
3 OctNews alert: SquareX shows how Google’s MV3 standard falls short, putting millions at riskSingapore, Oct. 3, 2024, CyberNewswire — At DEF CON 32, the SquareX research team delivered a hard-hitting presentation titled Sneaky Extensions: The MV3 Escape Artists where they shared their findings on how malicious browser extensions are bypassing Google’s latest standa…LASTWATCHDOG.COM
3 OctNews alert: Doppler fortifies ‘secrets management’ with Change Requests auditable approval featureSan Francisco, Calif., Oct. 3, 2024, CyberNewswire — Doppler , the leading platform in secrets management, today announces the launch of Change Requests , a new feature providing engineering teams with a secure, auditable approval process for managing and controlling ……LASTWATCHDOG.COM
3 OctUS, Microsoft Seize Domains Used in Russian Spear-PhishingFSB Hackers Stripped of 107 Domains Used to Steal Credentials The U.S. Department of Justice and Microsoft seized more than 100 websites allegedly used by a Russian intelligence cyberespionage operation with a fondness for spear phishing. Targets include the national security app…DATABREACHTODAY.CO.UK
3 OctA Leader in 2024 Forrester Enterprise Firewall Solutions WavePalo Alto Networks has been named a Leader in the Forrester Wave™: Enterprise Firewall Solutions, Q4 2024 report. The post A Leader in 2024 Forrester Enterprise Firewall Solutions Wave appeared first on Palo Alto Networks Blog .PALOALTONETWORKS.COM
3 OctCyberRiskTV Live Coverage from Oktane 2024 - Day 2CyberRisk Alliance's Security Weekly and SC Media teams broadcasting live from the CyberRiskTV Studio, Caesars Forum, Las Vegas, NV, at Oktane 2024! Schedule: 9:10am-9:25am PT - Daily Intro with Mandy Logan & Shaun Nichols 9:40am-9:55am PT - David Bradbury, interviewed by Mandy L…YOUTUBE.COM
3 OctCyberRiskTV Live Coverage from Oktane 2024 - Day 1CyberRisk Alliance's Security Weekly and SC Media teams are broadcasting live from the CyberRiskTV Studio, Caesars Forum, Las Vegas, NV, at Oktane 2024! Schedule: 9:40am-9:55am PT - Daily Intro with Mandy Logan & Shaun Nichols 10:10am-10:25am PT - Bhawna Singh, interviewed by Man…YOUTUBE.COM
🌐 CYBER THREAT LANDSCAPE 2[−]
3 OctLinux malware “perfctl” behind years-long cryptomining campaignA Linux malware named "perfctl" has been targeting Linux servers and workstations for at least three years, remaining largely undetected through high levels of evasion and the use of rootkits. [...]BLEEPINGCOMPUTER.COM
3 OctNew Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and ProxyjackingLinux servers are the target of an ongoing campaign that delivers a stealthy malware dubbed perfctl with the primary aim of running a cryptocurrency miner and proxyjacking software. "Perfctl is particularly elusive and persistent, employing several sophisticated techniques," Aqua…THEHACKERNEWS.COM
📡 INFOSEC NEWS 13[−]
3 OctRogue AI: What the Security Community is MissingThis is the fourth blog post in an ongoing series on Rogue AI. Keep following for more technical guidance, case studies, and insights.TRENDMICRO.COM
3 OctINTERPOL Arrests 8 in Major Phishing and Romance Fraud Crackdown in West AfricaINTERPOL has announced the arrest of eight individuals in Côte d'Ivoire and Nigeria as part of a crackdown on phishing scams and romance cyber fraud. Dubbed Operation Contender 2.0, the initiative is designed to tackle cyber-enabled crimes in West Africa, the agency said. One suc…THEHACKERNEWS.COM
3 OctDifferential fuzzing for cryptographyFollowing a brief introduction to differential fuzzing, this blog post reviews the leading tools that leverage it for testing cryptographic primitives. In the second half, we present a method for creating a differential fuzzer along with the results we obtained.QUARKSLAB.COM
3 OctWhy your password policy should include a custom dictionaryUtilizing a custom dictionaries helps strengthen your password policies. Learn more from Specops Software about how to build custom dictionaries in your Windows Active Directory password policy. [...]BLEEPINGCOMPUTER.COM
3 OctThe Secret Weakness Execs Are Overlooking: Non-Human IdentitiesFor years, securing a company’s systems was synonymous with securing its “perimeter.” There was what was safe “inside” and the unsafe outside world. We built sturdy firewalls and deployed sophisticated detection systems, confident that keeping the barbarians outside the walls kep…THEHACKERNEWS.COM
3 OctCloudflare blocks largest recorded DDoS attack peaking at 3.8TbpsDuring a distributed denial-of-service campaign targeting organizations in the financial services, internet, and telecommunications sectors, volumetric attacks peaked at 3.8 terabits per second, the largest publicly recorded to date. The assault consisted of a "month-long" barrag…BLEEPINGCOMPUTER.COM
3 OctFraudsters imprisoned for scamming Apple out of 6,000 iPhonesTwo Chinese nationals were sentenced to prison for scamming Apple out of more than $2.5 million after exchanging over 6,000 counterfeit iPhones for authentic ones. [...]BLEEPINGCOMPUTER.COM
3 OctHow to snoop on what an Apple Vision Pro user is typing | Kaspersky official blogResearchers have described a method to spy on what an Apple Vision Pro user is typing on the virtual keyboard, including passwords.KASPERSKY.COM
3 OctMicrosoft and DOJ disrupt Russian FSB hackers' attack infrastructureMicrosoft and the Justice Department have seized over 100 domains used by the Russian ColdRiver hacking group to target United States government employees and nonprofit organizations from Russia and worldwide in spear-phishing attacks. [...]BLEEPINGCOMPUTER.COM
3 Oct‘Pig butchering’ trading apps found on Google Play, App StoreFake trading apps on Google Play and Apple's App Store lure victims into "pig butchering" scams that have a global reach. [...]BLEEPINGCOMPUTER.COM
3 OctWhy your password policy should include a custom dictionary wordlistUtilizing a custom dictionaries helps strengthen your password policies. Learn more from Specops Software about how to build custom dictionaries in your Windows Active Directory password policy. [...]BLEEPINGCOMPUTER.COM